BugTraq
Re: Windows XP explorer.exe heap overflow. Feb 23 2004 09:31PM
Chris Calabrese (chris_calabrese yahoo com) (1 replies)
blocking gzip encoded files Feb 23 2004 10:38PM
Darwin Mecham (darwin cissp com) (2 replies)
Re: blocking gzip encoded files Feb 24 2004 06:00PM
Josep L. Guallar-Esteve (guallar easternrad com)
On Monday 23 February 2004 05:38 pm, Darwin Mecham wrote:
> It has recently come to my attention that most browsers happily
> do Accept-encoding: gzip and streaming decompression of
> HTML data received with Content-encoding: gzip
> without asking.

This is because most browsers support HTTP-1.1 standard.

http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.11
http://www.w3.org/Talks/9608HTTP/
http://www.seoconsultants.com/articles/1000/http-compression.asp

> This has been in use since sometime in 1998.

IIRC, HTTP 1.1 was endorsed by W3C ~ 1999

> Is there a way to configure the run-of-the-mill browser to
> block these at the host level ?

You can disable HTTP 1.1 compliance if you wish.

> Darwin

Regards,
Josep
--
Josep L. Guallar-Esteve Eastern Radiologists, Inc.
Systems and Network Administration http://www.easternrad.com

[ reply ]
Re: blocking gzip encoded files Feb 24 2004 02:01AM
mgotts 2roads com


 

Privacy Statement
Copyright 2010, SecurityFocus